External desktop agent for secure networks

• US 9,026,700 B2
• Filed: 07/18/2011
• Issued: 05/05/2015
• Est. Priority Date: 07/18/2011
• Status: Active Grant

• Current Assignee: RGB Spectrum, Inc.
• Original Assignee: RGB Spectrum, Inc.
• Inventors: Marcus, Robert
• Primary Examiner(s): ABAD, FARLEY J
• Application Number:
  US13/185,360
• Publication Number:
  US 20130024584A1
• Time in Patent Office: 1,387 Days
• Field of Search: 710/29, 710/62, 710/26
• US Class Current: 710/63
• CPC Class Codes: G06F 13/14 Handling requests for interconnection or transfer
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

Methods and apparatus are provided for externally managing control target devices such as computer systems, cameras, recorders, etc., in an effective and secure manner. In particular examples, an external desktop agent is connected to a computer system. Remote desktop agent software need not be installed on the computer system. The external desktop agent receives commands such as keyboard and mouse commands from a control computer over a mechanism such as a bi-directional network. To provide security, the external desktop agent does not directly connect to the computer system over an interface such as universal serial bus (USB) but instead provides a PS/2 interface that connects to the computer system through a standard PS/2 to USB adapter. PS/2 does not allow bi-directional command signaling and does not provide file level access to potentially sensitive computer system data.

Claims

1. A system, comprising:

a control computer;

an external desktop agent connected to the control computer through a first network, the external desktop agent including a network interface configured to receive a first control message including control information in a first signal format via the first network, a signal mapping mechanism configured to map the control information from the first signal format to a second signal format, a signal generator configured to generate a second control message including the control information in the second signal format, and a signal interface configured to transmit the second control message;

a signal adapter connected to the external desktop agent, the signal adapter configured to receive the second control message, to generate a third control message including the control information in a third signal format, and to transmit the third control message; and

a control target device including a computer system connected with the signal adapter, wherein the control computer is operable to manage the control target device through the external desktop agent and signal adapter, wherein the signal adapter is physically configured to transmit only uni-directional communication from the external desktop agent to the control target device, and wherein all commands transmitted between the control computer and the control target device are transmitted via the external desktop agent and the signal adapter.

2. The system of claim 1, wherein the signal mapping mechanism takes commands and signals received over the network interface and converts them into Personal System/2 (PS/2) commands.

3. The system of claim 1, wherein the signal adapter is a Personal System/2 (PS/2) commands to Universal Serial Bus (USB) converter.

4. The system of claim 1, wherein the external desktop agent operate as a uni-directional valve allowing only uni-directional signaling.

5. The system of claim 1, wherein the control target device is connected to a video output target.

6. The system of claim 1, wherein the control target device is connected to a video processor associated with a video wall.

7. The system of claim 1, wherein the control target device is connected to a second secure network separate from the first network.

8. The system of claim 1, wherein the control computer is operable to manage the computer system without the installation of remote desktop agent software on the computer system.

9. The system of claim 1, wherein the control target device is connected to a video output target through a video interface.

10. The system of claim 9, wherein the video interface is a Digital Video Interface (DVI).

11. A device comprising:

a network interface configured to receive from a control computer via a network a first control message including control information in a first signal format;

a signal mapping mechanism configured to map the control information from the first signal format to a second signal format;

a signal generator configured to generate a second control message including the control information in the second signal format;

a signal interface configured to transmit the second control message; and

a signal adapter configured to receive the second control message and to transmit to a control target device including a computer system a third control message including the control information in a third signal format, the signal adapter physically configured to transmit only uni-directional communication from the external desktop agent to the control target device, wherein the control computer is operable to manage the control target device through the external desktop agent and signal adapter, and wherein all commands transmitted between the control computer and the control target device are transmitted via the external desktop agent and the signal adapter.

12. The device of claim 11, wherein the control target device is a camera or recorder.

13. The device of claim 11, wherein the control target device is a computer system.

14. The device of claim 11, wherein the control target device is connected to a video output target.

15. The device of claim 11, wherein the control target device is connected to a video processor associated with a video wall.

16. The device of claim 11, wherein the control target device is connected to a second secure network separate from the first network.

17. The device of claim 11, wherein the control computer is operable to manage the control target device without the installation of remote desktop agent software on the control target device.

18. A method comprising:

receiving a first control message from a control computer, the first control message received at a network interface associated with an external desktop agent, the first control message including control information in a first signal format;

mapping the control information from the first signal format to a second signal format;

transmitting a second control message from the external desktop agent to a signal adapter, the second control message including the control information in the second signal format; and

transmitting a third control message from the signal adapter to a control target device including a computer system, the third control message including the control information in a third signal format, wherein the control computer is operable to manage the control target device through the external desktop agent and signal adapter, wherein the signal adapter is physically configured to transmit only uni-directional communication from the external desktop agent to the control target device, and wherein all commands transmitted between the control computer and the control target device are transmitted via the external desktop agent and the signal adapter.

19. The method of claim 18, wherein the first signal format comprises a network packet protocol and wherein the second signal format comprises a PS/2 protocol.

20. The method of claim 18, wherein the signal adapter is configured to convert Personal System/2 (PS/2) commands to Universal Serial Bus (USB) commands.